ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-14376) Create KerberosHelper method to create the headless Kerberos identities and keytab files (inline)
Date Wed, 16 Dec 2015 11:55:46 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-14376?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas updated AMBARI-14376:
----------------------------------
    Description: 
Create a KerberosHelper method to create the headless Kerberos identities and keytab files
(inline). 

This can be used to create the common identities and keytab files before parallel invocations
attempt to do so. Due to a race condition, parallel invocations of the server-side actions
to create principals and keytab files may lead to invalid keytab files being distributed to
some host because the password contained in them were clobbered. 

By calling this new method before calls to install and start services the potential of the
race condition will be avoided. 

{code}
  boolean ensureHeadlessIdentities(Cluster cluster, Map<String, Map<String, String>>
existingConfigurations, Set<String> services)
      throws KerberosInvalidConfigurationException, AmbariException;
{code}


  was:
Create a KerberosHelper method to create the headless Kerberos identities and keytab files
(inline). 

This can be used to create the common identities and keytab files before parallel invocations
attempt to do so. Due to a race condition, parallel invocations of the server-side actions
to create principals and keytab files may lead to invalid keytab files being distributed to
some host because the password contained in them were clobbered. 

By calling this new method before calls to install and start services the potential of the
race condition will be avoided. 

{code}
boolean createHeadlessKerberosIdentities(Cluster cluster, Map<String, Map<String, String>>
existingConfigurations, Set<String> services)
{code}



> Create KerberosHelper method to create the headless Kerberos identities and keytab files
(inline)
> -------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-14376
>                 URL: https://issues.apache.org/jira/browse/AMBARI-14376
>             Project: Ambari
>          Issue Type: Task
>          Components: ambari-server
>    Affects Versions: 2.2.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>             Fix For: 2.3.0
>
>         Attachments: AMBARI-14376_trunk_01.patch
>
>
> Create a KerberosHelper method to create the headless Kerberos identities and keytab
files (inline). 
> This can be used to create the common identities and keytab files before parallel invocations
attempt to do so. Due to a race condition, parallel invocations of the server-side actions
to create principals and keytab files may lead to invalid keytab files being distributed to
some host because the password contained in them were clobbered. 
> By calling this new method before calls to install and start services the potential of
the race condition will be avoided. 
> {code}
>   boolean ensureHeadlessIdentities(Cluster cluster, Map<String, Map<String, String>>
existingConfigurations, Set<String> services)
>       throws KerberosInvalidConfigurationException, AmbariException;
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message